Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LTbu-dpDTxPCIZdP2Dlq_-9fWy4.roa
File: LTbu-dpDTxPCIZdP2Dlq_-9fWy4.roa (raw, json)
Hash identifier: BHpKAlf4vSraZ/YVQAcafw4wnwclX/uyY4Txl3H7dac=
Subject key identifier: 2D:36:EE:F9:DA:43:4F:13:C2:21:97:4F:D8:39:6A:FF:EF:5F:5B:2E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1964
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LTbu-dpDTxPCIZdP2Dlq_-9fWy4.roa
Signing time: Mon 09 Jun 2025 22:39:38 +0000
ROA not before: Mon 09 Jun 2025 22:39:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6500 (0x1964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 22:39:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2D36EEF9DA434F13C221974FD8396AFFEF5F5B2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:1b:d7:57:e2:d6:07:d6:e5:e9:48:82:b7:
c2:17:c5:64:5e:79:4b:fd:08:ca:b3:e4:19:4d:7c:
30:03:7a:88:63:91:04:6d:4c:65:4b:90:b2:1d:56:
e9:23:36:8b:df:c9:71:2b:da:a7:72:ea:bf:7a:c7:
57:7c:ac:8b:f9:54:e8:af:e7:9d:33:30:f7:3f:0f:
a0:df:b2:6c:41:87:75:9e:75:bc:76:7c:55:c2:e8:
91:32:2c:ce:4e:72:3b:5d:62:6a:fd:f1:e6:c1:09:
96:2e:64:f4:0b:fc:c5:58:da:60:d5:4e:b8:7f:04:
59:7c:c9:c8:91:f5:59:83:2e:3d:17:5f:59:b2:59:
40:89:7c:f7:5d:6f:f6:3d:16:bb:9d:11:06:0c:9a:
77:31:e2:a1:9c:0b:5f:3e:ba:d8:b1:47:ce:28:69:
7e:d2:d6:34:f7:ef:da:d6:fa:57:a0:ff:01:aa:08:
f3:b5:ec:05:ae:5f:d4:f6:ec:bd:cc:df:24:a0:fd:
54:de:1d:0e:12:c3:e8:2a:c8:b6:9e:50:28:29:05:
ed:25:ea:59:b3:e0:1c:1a:33:14:be:79:b7:fb:d5:
cc:55:b2:6f:3c:80:51:db:36:17:c2:33:d5:83:c1:
5a:2b:f1:f2:62:4c:80:04:d6:4f:bc:40:fa:ff:49:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:EE:F9:DA:43:4F:13:C2:21:97:4F:D8:39:6A:FF:EF:5F:5B:2E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LTbu-dpDTxPCIZdP2Dlq_-9fWy4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:14:25:a0:00:28:1c:05:c7:c2:2a:b1:83:d1:7a:f6:6d:bf:
5e:cf:47:78:7b:5e:5d:2a:28:4e:ec:ed:33:f3:4c:4b:70:0f:
3c:48:dd:0c:fb:95:ab:85:dc:f3:66:40:b9:7c:70:47:8a:73:
7c:a3:ff:30:5c:56:ea:8d:34:8a:6b:e4:48:c5:7c:aa:e0:62:
30:9b:54:3c:bc:ee:33:a5:00:f0:06:44:40:67:4c:f5:26:8e:
88:b1:06:0a:be:2e:4d:b4:fa:d4:29:3e:3e:29:10:85:ec:e3:
c5:f3:1a:83:6c:3d:00:dc:a5:4a:94:93:99:22:76:bf:14:7a:
10:cf:91:97:3b:cf:fd:2a:e4:0c:42:38:79:fa:9f:90:4c:c6:
3d:48:0a:fe:08:bd:03:f0:d1:91:91:10:79:ac:c1:02:83:98:
78:58:ff:06:18:c6:9a:bb:dd:d4:80:35:9a:63:44:58:4c:c0:
3d:3d:85:6f:14:56:31:e9:9b:a0:d7:6e:40:aa:5f:81:2e:d7:
8f:c7:02:41:75:b6:73:00:82:c5:25:0e:2a:98:99:20:73:cd:
0a:fb:c9:f7:80:79:6b:ad:dd:aa:c9:3c:dc:e2:09:88:c5:aa:
04:72:5a:a3:99:e7:92:53:37:f3:df:f4:0b:57:40:41:30:8c:
78:01:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:51:53 2025 by rpki-client